Overview

overview

10

Static

static

Odwikp.dll

windows7-x64

10

Odwikp.dll

windows10-2004-x64

10

Unpaid_394...1.html

windows7-x64

1

Unpaid_394...1.html

windows10-2004-x64

1

document_3...ta.lnk

windows7-x64

3

document_3...ta.lnk

windows10-2004-x64

3

document_3...ed.bat

windows7-x64

1

document_3...ed.bat

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2022-10-31-malware-and-artifacts-from-IcedID-infection.zip

  • Size

    1.4MB

  • MD5

    269a6c866d215f2e076558c0a5e07c15

  • SHA1

    c61f8c3fc4ab3eefba6c011b553457a16b2bda03

  • SHA256

    0c379e7f59e89605eb70890dfeeb564ac64461fc8911031f15cbf5c4ace639e5

  • SHA512

    971b5359657a45139619b97e8fe4dc7bb83a8fc0744472e2700f4a3e733422003f5e8ea21fdba4b6735d1acd848e1484f7be0b4624375d99e762b852b19d19d8

  • SSDEEP

    24576:fvg8ia70j8/Czvte5KdBcZxtb8VHcAJcg9UjJNPhL3DhUtfYJDfpB0S1tuAfo70s:f48GY6zv45KsZXTI2J7mQdxWS1YAgPtL

Score
N/A

Malware Config

Signatures

Files

  • 2022-10-31-malware-and-artifacts-from-IcedID-infection.zip
    .zip

    Password: infected

  • 2022-10-31-IOCs-for-IcedID-with-DarkVNC-and-Cobalt-Strike.txt
  • 2022-10-31-gzip-binary-from-vgiragdoffy.com.bin
    .gz
  • 2022-10-31-scheduled-task-for-IcedID.txt
  • Invoice.zip
    .zip
  • Odwikp.dll
    .dll .js windows x64

    Password: infected

  • Unpaid_3945_Oct31.html
    .html .js
  • document_3_Oct31.iso
  • document_3_Oct31.iso.contents/Data.lnk
    .lnk
  • document_3_Oct31.iso.contents/ribfaymasnot/chickenrelaxed.bat
  • document_3_Oct31.iso.contents/ribfaymasnot/shortening.dat
    .dll .js windows x64

    Password: infected

  • license.dat